VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
286921 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2026-64498 | redhat_vex | kernel: iio: buffer: hw-consumer: free scan_mask on buffer release | known affected: 184 known not affected: 90 | 2026-07-30T03:31:23+00:00 | Vulnerability · Source |
| CVE-2026-64310 | redhat_vex | kernel: crypto: ccp - Do not initialize SNP for SEV ioctls | known affected: 184 known not affected: 90 | 2026-07-30T03:31:19+00:00 | Vulnerability · Source |
| CVE-2026-64471 | redhat_vex | kernel: Bluetooth: btusb: fix use-after-free on registration failure | known affected: 274 | 2026-07-30T03:26:18+00:00 | Vulnerability · Source |
| CVE-2026-64483 | redhat_vex | kernel: ALSA: firewire: isight: bound the sample count to the packet payload | known affected: 76 known not affected: 198 | 2026-07-30T03:26:15+00:00 | Vulnerability · Source |
| CVE-2026-64526 | redhat_vex | kernel: ethtool: tsconfig: fix missing ethnl_ops_complete() | known affected: 184 known not affected: 90 | 2026-07-30T03:11:44+00:00 | Vulnerability · Source |
| CVE-2026-50627 | redhat_vex | apache-cxf: org.apache.cxf/cxf-rt-rs-security-oauth2: Apache CXF: Token Confusion/Routing attacks due to improper validation of JWT audience claims | fixed: 1 known affected: 4 known not affected: 2 | 2026-07-30T03:11:36+00:00 | Vulnerability · Source |
| CVE-2026-64473 | redhat_vex | kernel: vfio: Remove device debugfs before releasing devres | known affected: 184 known not affected: 90 | 2026-07-30T03:06:25+00:00 | Vulnerability · Source |
| CVE-2026-41608 | redhat_vex | thrift: Apache Thrift Python bindings: Denial of Service via data amplification | known not affected: 7 | 2026-07-30T03:01:29+00:00 | Vulnerability · Source |
| CVE-2026-64460 | redhat_vex | kernel: PCI/IOV: Skip VF Resizable BAR restore on read error | known affected: 198 known not affected: 76 | 2026-07-30T03:01:20+00:00 | Vulnerability · Source |
| CVE-2026-64319 | redhat_vex | kernel: nvmet-auth: validate reply message payload bounds against transfer length | known affected: 184 known not affected: 90 | 2026-07-30T02:50:58+00:00 | Vulnerability · Source |
| CVE-2025-22228 | redhat_vex | spring-security-core: Spring Security BCryptPasswordEncoder does not enforce maximum password length | fixed: 29 known affected: 7 known not affected: 5 | 2026-07-30T02:20:17+00:00 | Vulnerability · Source |
| CVE-2025-49146 | redhat_vex | pgjdbc: pgjdbc insecure authentication in channel binding | fixed: 27 known affected: 2 known not affected: 61 | 2026-07-30T02:20:12+00:00 | Vulnerability · Source |
| CVE-2025-64518 | redhat_vex | cyclonedx-core-java: CycloneDX Core (Java): BOM validation is vulnerable to XML External Entity injection | fixed: 2 known affected: 4 known not affected: 9 | 2026-07-30T02:15:21+00:00 | Vulnerability · Source |
| CVE-2025-41248 | redhat_vex | org.springframework.security/spring-security-core: Spring Security authorization bypass | fixed: 6 known affected: 3 known not affected: 61 | 2026-07-30T02:10:31+00:00 | Vulnerability · Source |
| CVE-2026-41409 | redhat_vex | Apache MINA: Apache MINA: Arbitrary code execution via incomplete deserialization fix | known affected: 12 known not affected: 19 | 2026-07-30T02:06:15+00:00 | Vulnerability · Source |
| CVE-2026-53550 | redhat_vex | js-yaml: js-yaml: Denial of Service via crafted YAML merge keys | fixed: 12 known affected: 134 known not affected: 52 | 2026-07-30T01:56:35+00:00 | Vulnerability · Source |
| CVE-2026-40972 | redhat_vex | Spring Boot: Spring Boot: Remote code execution via timing attack in DevTools remote secret comparison | fixed: 10 known affected: 2 known not affected: 68 | 2026-07-30T01:56:28+00:00 | Vulnerability · Source |
| CVE-2024-55887 | redhat_vex | ucum: Ucum-java has an XXE vulnerability in XML parsing | known not affected: 2 | 2026-07-30T01:52:51+00:00 | Vulnerability · Source |
| CVE-2025-22235 | redhat_vex | org.springframework.boot/spring-boot: Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed | known affected: 8 known not affected: 13 | 2026-07-30T01:52:48+00:00 | Vulnerability · Source |
| CVE-2025-35036 | redhat_vex | hibernate-validator: Hibernate Validator Expression Language Injection | fixed: 181 known affected: 4 known not affected: 15 | 2026-07-30T01:47:11+00:00 | Vulnerability · Source |
| CVE-2024-9621 | redhat_vex | io.quarkiverse.cxf:quarkus-cxf: Quarkus CXF may log user password and secret to application log | fixed: 1 | 2026-07-30T01:43:21+00:00 | Vulnerability · Source |
| CVE-2026-42403 | redhat_vex | org.apache.neethi: Apache Neethi: Denial of Service via circular policy references | fixed: 1 known affected: 8 | 2026-07-30T01:43:12+00:00 | Vulnerability · Source |
| CVE-2026-42404 | redhat_vex | Apache Neethi: Apache Neethi: Information disclosure and network access bypass via PolicyReference API | fixed: 1 known affected: 8 | 2026-07-30T01:42:20+00:00 | Vulnerability · Source |
| CVE-2025-1948 | redhat_vex | jetty-http2-common: Jetty HTTP/2 Header List Size Vulnerability | fixed: 30 | 2026-07-30T01:42:09+00:00 | Vulnerability · Source |
| CVE-2025-1634 | redhat_vex | io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout | fixed: 6 known affected: 1 | 2026-07-30T01:41:22+00:00 | Vulnerability · Source |
| CVE-2024-8447 | redhat_vex | narayana: deadlock via multiple join requests sent to LRA Coordinator | fixed: 62 known affected: 3 | 2026-07-30T01:30:14+00:00 | Vulnerability · Source |
| CVE-2026-64388 | redhat_vex | kernel: smb/client: fix chown/chgrp with SMB3 POSIX Extensions | known affected: 232 known not affected: 42 | 2026-07-30T00:23:29+00:00 | Vulnerability · Source |
| CVE-2026-64370 | redhat_vex | kernel: posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path | known affected: 232 known not affected: 42 | 2026-07-30T00:23:25+00:00 | Vulnerability · Source |
| CVE-2026-64489 | redhat_vex | kernel: ALSA: ymfpci: check snd_ctl_new1() return value | known not affected: 274 | 2026-07-30T00:23:18+00:00 | Vulnerability · Source |
| CVE-2026-64358 | redhat_vex | kernel: media: mtk-jpeg: cancel workqueue on release for supported platforms only | known not affected: 274 | 2026-07-30T00:23:17+00:00 | Vulnerability · Source |
| CVE-2026-64320 | redhat_vex | kernel: nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page | known affected: 260 known not affected: 14 | 2026-07-30T00:22:43+00:00 | Vulnerability · Source |
| CVE-2026-31490 | redhat_vex | kernel: drm/xe/pf: Fix use-after-free in migration restore | known affected: 76 known not affected: 198 | 2026-07-30T00:22:38+00:00 | Vulnerability · Source |
| CVE-2026-64416 | redhat_vex | kernel: mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host | known affected: 76 known not affected: 198 | 2026-07-30T00:22:32+00:00 | Vulnerability · Source |
| CVE-2026-64360 | redhat_vex | kernel: hfs/hfsplus: zero-initialize buffer in hfs_bnode_read | known not affected: 274 | 2026-07-30T00:22:27+00:00 | Vulnerability · Source |
| CVE-2026-64463 | redhat_vex | kernel: usb: typec: tcpci_rt1711h: unregister TCPCI port with devres | known affected: 48 known not affected: 226 | 2026-07-30T00:22:21+00:00 | Vulnerability · Source |
| CVE-2026-51298 | redhat_vex | sqlite: SQLite: Denial of Service via use-after-free in JSON extraction | fixed: 4 known affected: 93 known not affected: 14 | 2026-07-30T00:13:08+00:00 | Vulnerability · Source |
| CVE-2026-44172 | redhat_vex | mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string() | fixed: 130 known not affected: 135 | 2026-07-29T21:20:24+00:00 | Vulnerability · Source |
| CVE-2026-23350 | redhat_vex | kernel: drm/xe/queue: Call fini on exec queue creation fail | known affected: 76 known not affected: 198 | 2026-07-29T20:57:17+00:00 | Vulnerability · Source |
| CVE-2026-53393 | redhat_vex | kernel: nfsd: reset write verifier on deferred writeback errors | known affected: 198 known not affected: 77 | 2026-07-29T20:42:19+00:00 | Vulnerability · Source |
| CVE-2026-0685 | redhat_vex | genshi: Genshi Template Engine: Remote Code Execution via Server-Side Template Injection | known not affected: 1 | 2026-07-29T20:37:16+00:00 | Vulnerability · Source |
| CVE-2026-30892 | redhat_vex | crun: crun: Privilege escalation due to incorrect parsing of the `--user` option | fixed: 86 known affected: 1 known not affected: 2 | 2026-07-29T20:31:05+00:00 | Vulnerability · Source |
| CVE-2026-50642 | redhat_vex | diff-so-fancy: diff-so-fancy: Terminal escape injection allows command execution | known not affected: 1 | 2026-07-29T20:17:18+00:00 | Vulnerability · Source |
| CVE-2026-63804 | redhat_vex | kernel: gfs2: fix use-after-free in gfs2_qd_dealloc | known affected: 198 known not affected: 76 | 2026-07-29T20:17:18+00:00 | Vulnerability · Source |
| CVE-2026-64645 | redhat_vex | next: Next.js: Server-Side Request Forgery vulnerability | known affected: 21 known not affected: 1 | 2026-07-29T19:57:50+00:00 | Vulnerability · Source |
| CVE-2026-64644 | redhat_vex | next: Next.js: Denial of Service via malicious image optimization | known affected: 17 known not affected: 5 | 2026-07-29T19:47:18+00:00 | Vulnerability · Source |
| CVE-2026-53385 | redhat_vex | kernel: vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write | known affected: 184 known not affected: 90 | 2026-07-29T19:42:32+00:00 | Vulnerability · Source |
| CVE-2026-64649 | redhat_vex | next: Next.js: Server-Side Request Forgery via malicious host redirection in Server Actions | known affected: 21 known not affected: 1 | 2026-07-29T19:42:30+00:00 | Vulnerability · Source |
| CVE-2026-64648 | redhat_vex | next: Next.js: Information disclosure via server-side fetch cache | known affected: 21 known not affected: 1 | 2026-07-29T19:37:23+00:00 | Vulnerability · Source |
| CVE-2026-64646 | redhat_vex | next: Next.js: Denial of Service via excessive memory consumption in Server Actions | known affected: 21 known not affected: 1 | 2026-07-29T19:22:31+00:00 | Vulnerability · Source |
| CVE-2026-59919 | redhat_vex | io.netty/netty-codec-haproxy: Netty: Improper CR/LF neutralization in netty-codec-haproxy | known affected: 39 | 2026-07-29T19:04:18+00:00 | Vulnerability · Source |